Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft
File:                     ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft (raw, json)
Hash identifier:          lvgXsc3qjY3o9xVBsO4BvNu0lDmtzlPry15Zc8rfolY=
Subject key identifier:   6F:CD:02:D1:41:71:3E:22:B6:D4:55:4E:72:C0:CF:B4:DB:70:4F:F2
Authority key identifier: 6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE
Certificate issuer:       /CN=A91CE978/serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE
Certificate serial:       35FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft
Manifest number:          3593
Signing time:             Wed 06 May 2026 14:52:41 +0000
Manifest this update:     Wed 06 May 2026 14:52:40 +0000
Manifest next update:     Wed 13 May 2026 14:52:40 +0000
Files and hashes:         1: ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl (hash: ugwLxKQ36WC59VwgutykTz2OEXWwWhKA2E8A+3H4PS8=)
                          2: 29F7413CBB6011EEB59E5D81C4F9AE02.roa (hash: UKXFh7gTm0rXHnOIQY0kDYmGOiQsiOQkbThjpV/y9Uk=)
                          3: 64E2B628BE4911EE897F291BC4F9AE02.roa (hash: qLKIOz6Oedhwx38zJO/77LtAdjmKeuJ/j9qSOecidn0=)
                          4: D79607EEDCDD11EE85DBEB12C4F9AE02.roa (hash: 8UZTwXBUXA7yxIQmBCYd7utQyxqxmd+gxoz97Gybm9s=)
                          5: D1EE6884F06C11EEA5BAA656C4F9AE02.roa (hash: DAjpYy2F7JuENdM1mCWzZ4UuisI9F+H32xQyrUo660o=)
                          6: DDF4B0D2F08C11EEB70A1F76C4F9AE02.roa (hash: 81ReA4BHk/lxP9lEIuQUr4XFnT42WFD0y3bTKzIXKJE=)
                          7: E6F73E22B99E11EEBF189021C4F9AE02.roa (hash: usfpiMLWoGDExv0ZzDkffe8BVX1FZLRCU+Dn0/pmF+g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl
                          rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13822 (0x35fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE978, serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE
        Validity
            Not Before: May  6 14:52:40 2026 GMT
            Not After : May 13 14:52:40 2026 GMT
        Subject: CN=69fb55b8-96f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:28:21:01:3a:eb:b5:47:ca:b7:83:33:5c:65:
                    75:40:e5:6a:91:a1:b4:1b:d3:8a:c7:48:97:5e:dd:
                    b0:f4:f6:58:8a:86:3e:df:76:5a:9f:cd:57:3a:dc:
                    4c:db:17:49:7a:33:77:9b:9b:aa:2d:85:48:a3:f2:
                    d3:d4:23:03:0f:3a:67:1c:f3:73:fb:93:3e:96:a4:
                    d7:4a:63:f5:1c:4e:2d:d7:19:c8:a4:95:40:0a:99:
                    35:7d:e4:ce:06:d1:7c:c4:59:bc:cd:7a:58:aa:41:
                    6b:f3:4d:a8:0f:05:84:d5:1f:90:98:2c:3e:cb:9a:
                    b3:c6:04:93:a3:58:04:cd:24:22:ab:98:83:1a:60:
                    fd:0d:51:64:a5:c9:f8:6c:6c:1c:3e:38:c2:61:be:
                    9e:70:08:1c:8f:47:2b:c2:31:12:2e:74:c6:24:9c:
                    af:6e:11:22:66:46:dd:fb:9d:e1:f1:e8:07:17:05:
                    99:3b:43:75:23:1d:4a:c5:4e:86:54:f5:2d:07:85:
                    d6:fd:2e:40:ac:93:ab:ea:ea:13:49:19:79:c6:59:
                    4b:c3:73:2e:e9:b7:42:c3:cd:44:52:44:d2:12:3e:
                    e1:3a:9c:d8:f6:e4:8a:75:8e:03:a2:50:bd:44:83:
                    02:3c:15:8f:a0:bb:39:68:2b:a2:b9:25:25:a8:cd:
                    b5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:CD:02:D1:41:71:3E:22:B6:D4:55:4E:72:C0:CF:B4:DB:70:4F:F2
            X509v3 Authority Key Identifier:
                keyid:6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:0c:4a:c7:16:25:89:f9:a8:40:0c:93:f8:5d:e7:3c:62:36:
         9c:b3:3a:51:bd:5c:67:3b:2b:cf:97:18:22:8e:37:0a:d2:3d:
         32:cb:92:db:29:df:0e:47:c0:7b:4c:35:9e:67:ea:04:83:09:
         24:49:c5:e9:0e:61:e1:a1:43:1b:dd:92:45:c4:aa:7b:86:f5:
         92:eb:35:b7:c8:21:b2:16:30:37:c7:90:95:ae:d8:46:e5:39:
         62:1e:17:c8:f7:d4:22:82:d6:01:14:58:5e:0a:47:84:ac:b3:
         db:88:06:6e:cb:0c:f0:ce:0d:6d:49:98:73:8e:2a:94:3a:0f:
         69:14:87:2a:64:04:c3:21:54:5e:f1:4b:bc:ab:9a:62:f8:07:
         89:c9:7f:1b:5b:b9:38:72:63:17:66:74:7f:df:f1:21:d4:63:
         ff:ab:62:21:9f:37:3c:51:7e:a9:16:09:ce:73:b7:4a:e0:12:
         26:82:7e:11:66:64:a6:56:b8:7b:05:5c:eb:dc:c1:64:d0:5b:
         46:ca:c7:da:09:1b:45:e9:b8:6f:62:d9:80:67:6c:3a:ee:dd:
         0e:47:35:fc:e0:06:b5:2c:9b:14:16:31:cb:2e:ae:f0:84:ad:
         93:78:2a:ad:a4:a1:84:97:65:88:a9:23:fe:a1:44:43:fc:72:
         b5:18:b4:c7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0U5NzgxMTAvBgNVBAUTKDZBMUU0RjcyODQ3RUIzNjk5NTIyQzkzRDI2NzczRjBE
RjgzOTZFQkUwHhcNMjYwNTA2MTQ1MjQwWhcNMjYwNTEzMTQ1MjQwWjAYMRYwFAYD
VQQDEw02OWZiNTViOC05NmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0ighATrrtUfKt4MzXGV1QOVqkaG0G9OKx0iXXt2w9PZYioY+33Zan81XOtxM
2xdJejN3m5uqLYVIo/LT1CMDDzpnHPNz+5M+lqTXSmP1HE4t1xnIpJVACpk1feTO
BtF8xFm8zXpYqkFr802oDwWE1R+QmCw+y5qzxgSTo1gEzSQiq5iDGmD9DVFkpcn4
bGwcPjjCYb6ecAgcj0crwjESLnTGJJyvbhEiZkbd+53h8egHFwWZO0N1Ix1KxU6G
VPUtB4XW/S5ArJOr6uoTSRl5xllLw3Mu6bdCw81EUkTSEj7hOpzY9uSKdY4DolC9
RIMCPBWPoLs5aCuiuSUlqM21rwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG/NAtFB
cT4ittRVTnLAz7TbcE/yMB8GA1UdIwQYMBaAFGoeT3KEfrNplSLJPSZ3Pw34OW6+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTk3OC8zMjIzRjM1RTFE
OTgxMUUyOEE4QzJFODIwOEIwMkNEMi9haDVQY29SLXMybVZJc2s5Sm5jX0RmZzVi
cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FoNVBjb1ItczJtVklzazlKbmNfRGZnNWJyNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTk3OC8zMjIzRjM1RTFEOTgxMUUyOEE4QzJFODIwOEIwMkNEMi9haDVQY29SLXMy
bVZJc2s5Sm5jX0RmZzVicjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgAxKxxYlifmoQAyT+F3nPGI2nLM6Ub1cZzsrz5cYIo43CtI9MsuS2ynfDkfA
e0w1nmfqBIMJJEnF6Q5h4aFDG92SRcSqe4b1kus1t8ghshYwN8eQla7YRuU5Yh4X
yPfUIoLWARRYXgpHhKyz24gGbssM8M4NbUmYc44qlDoPaRSHKmQEwyFUXvFLvKua
YvgHicl/G1u5OHJjF2Z0f9/xIdRj/6tiIZ83PFF+qRYJznO3SuASJoJ+EWZkpla4
ewVc69zBZNBbRsrH2gkbRem4b2LZgGdsOu7dDkc1/OAGtSybFBYxyy6u8IStk3gq
raShhJdliKkj/qFEQ/xytRi0xw==
-----END CERTIFICATE-----
Generated at Thu May 7 06:30:02 2026 by rpki-client